azcomputerguru/claudetools
1
0
Fork 0
Code Issues 73 Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from HOWARD-HOME at 2026-07-17 17:30:30

Browse Source 
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-17 17:30:30
This commit is contained in:
Howard Enos
2026-07-17 17:31:00 -07:00
parent 10d14719c3
commit f443eeafea
1 changed files with 40 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

40
clients/cascades-tucson/session-logs/2026-07/2026-07-17-howard-nurse-station-kiosk-build.md
View File

@@ -142,3 +142,43 @@ The policy XML was written to `\\cascades.local\SYSVOL\cascades.local\scripts\ap
2. **Test as non-caregiver:** Verify Howard's own login is completely unrestricted (no AppLocker blocks, no UI restrictions, full Start menu).
3. **PRT/SSO verification:** Confirm ALIS SSO is fully silent after the PRT cache clear + reboot.
4. **Remaining roadmap items carried forward from earlier session.**
## Update: 15:05 PT — M365 license audit + shared mailbox conversions
### Session Summary
Audited the full Cascades M365 license inventory via Graph API. Discovered two distinct SKUs both named "Microsoft 365 Business Premium": the active **SPB** (`cbdc14ab-...`, 45 seats, 40 consumed) and a legacy suspended **O365_BUSINESS_PREMIUM** (`f245ecc8-...`, 37 seats suspended, 23 users still assigned). The key difference: SPB includes the security stack (Intune, MDE, Entra P1, MFA Premium, AIP, Purview, Windows Business) while the legacy SKU does not. Also found 5 users on a suspended Exchange Essentials SKU.
Identified 12 functional/role-based accounts (accounting@, accountingassistant@, boadmin@, frontdesk@, hr@, memcarereceptionist@, security@, Training@, fax@, medtech@, nurse@, transportation@) as shared mailbox conversion candidates. Checked sign-in audit logs for all 12: **frontdesk@ and memcarereceptionist@ are actively used** (daily sign-ins from on-site workstations); the other 10 had zero sign-ins in the last 30 days.
With Howard's approval, converted 8 user mailboxes to shared mailboxes (accountingassistant@, boadmin@, hr@, security@, Training@, medtech@, nurse@, transportation@) via Exchange Online `Set-Mailbox -Type Shared`; accounting@ and fax@ were already shared. Removed licenses from all 10: 6x O365_BUSINESS_PREMIUM and 4x EXCHANGE_S_ESSENTIALS. medtech@ forwarding to nurses@cascadestucson.com was preserved. Post-conversion: O365BP suspended consumed dropped from 29 to 23; EXCH-ESS suspended consumed dropped from 5 to 1.
Produced the full tenant license roster for Howard to cross-reference with Pax8 billing. The 23 remaining users on the suspended O365BP need to be swapped to SPB seats. SPB has 5 free seats, so 18 more are needed through Pax8 (either a subscription swap from the old SKU or a seat increase). Howard is checking Pax8 for what's currently being billed.
### Key Decisions
- Converted 10 inactive functional accounts to shared mailboxes rather than keeping them licensed. Shared mailboxes receive/send email identically but don't consume a paid license (up to 50GB). Zero workflow impact since nobody signs into them.
- Left frontdesk@ and memcarereceptionist@ as licensed user mailboxes — both have active daily sign-ins from on-site workstations.
- Identified the two-SKU situation as a Pax8 billing question, not a net-new-cost question — Howard may already be paying for the old SKU seats through Pax8, in which case it's a subscription swap.
### Configuration Changes
- Exchange Online: 8 mailboxes converted UserMailbox -> SharedMailbox (accountingassistant@, boadmin@, hr@, security@, Training@, medtech@, nurse@, transportation@)
- Licenses removed: 6x O365_BUSINESS_PREMIUM (f245ecc8) from accounting@, accountingassistant@, boadmin@, hr@, security@, Training@; 4x EXCHANGE_S_ESSENTIALS (e8f81a67) from fax@, medtech@, nurse@, transportation@
### Infrastructure
- Tenant: 207fa277-e9d8-4eb7-ada1-1064d2221498
- SPB SKU: cbdc14ab-d96c-4c30-b9f4-6ada7cdc1d46 (45 enabled, 40 consumed, 5 free)
- O365_BUSINESS_PREMIUM SKU: f245ecc8-75af-4f8e-b61f-27d8114de5f3 (SUSPENDED, 23 consumed post-conversion)
- EXCHANGE_S_ESSENTIALS SKU: e8f81a67-bd96-4074-b108-cf193eb9433b (SUSPENDED, 1 consumed post-conversion — Shelby Trozzi)
- SPB service plans include: INTUNE_A, MDE_SMB, AAD_PREMIUM, MFA_PREMIUM, RMS_S_ENTERPRISE, RMS_S_PREMIUM, PURVIEW_DISCOVERY, WINBIZ, OFFICE_SHARED_COMPUTER_ACTIVATION
- O365BP service plans do NOT include: Intune, MDE, AAD Premium, MFA Premium, AIP, Purview, Windows Business
### Pending / Incomplete Tasks
1. **Howard checking Pax8** — verify what's being billed for the old O365_BUSINESS_PREMIUM SKU; determine if it's a subscription swap or seat increase to move the 23 users to SPB.
2. **23 users still on suspended O365BP** — need SPB license assignment once seats are available (5 free today, need 18 more).
3. **Shelby Trozzi** — on BOTH suspended O365BP AND suspended EXCH-ESS; needs both removed and SPB assigned.
4. **pilot.test@** — consuming 1 SPB seat; reclaim when WS3 pilot is complete.
5. **devices@ and MDMS@** — service accounts consuming SPB seats; evaluate if they truly need full Business Premium.